A family of code coverage-based heuristics for effective fault localization

0164-1212/$ see front matter 2009 Elsevier Inc. A doi:10.1016/j.jss.2009.09.037 q This research was supported by the MKE (Minis Korea, under the ITRC (Information Technology Resea supervised by the NIPA (National IT Industry Prom (C1090-0902-0032)). * Corresponding author. Tel.: +1 972 883 6619; fax E-mail addresses: [email protected] (W. Eric Wo (V. Debroy), [email protected] (B. Choi). 1 In this paper, we use ‘‘software” and ‘‘program” ‘‘bugs” and ‘‘faults” interchangeably. Locating faults in a program can be very time-consuming and arduous, and therefore, there is an increased demand for automated techniques that can assist in the fault localization process. In this paper a code coverage-based method with a family of heuristics is proposed in order to prioritize suspicious code according to its likelihood of containing program bugs. Highly suspicious code (i.e., code that is more likely to contain a bug) should be examined before code that is relatively less suspicious; and in this manner programmers can identify and repair faulty code more efficiently and effectively. We also address two important issues: first, how can each additional failed test case aid in locating program faults; and second, how can each additional successful test case help in locating program faults. We propose that with respect to a piece of code, the contribution of the first failed test case that executes it in computing its likelihood of containing a bug is larger than or equal to that of the second failed test case that executes it, which in turn is larger than or equal to that of the third failed test case that executes it, and so on. This principle is also applied to the contribution provided by successful test cases that execute the piece of code. A tool, vDebug, was implemented to automate the computation of the suspiciousness of the code and the subsequent prioritization of suspicious code for locating program faults. To validate our method case studies were performed on six sets of programs: Siemens suite, Unix suite, space, grep, gzip, and make. Data collected from the studies are supportive of the above claim and also suggest Heuristics III(a), (b) and (c) of our method can effectively reduce the effort spent on fault localization. 2009 Elsevier Inc. All rights reserved.